Privacy Policy

Effective date: 12 June 2026

Unhyped helps you discover wine. This policy covers the Unhyped iOS app and our websites (unhyped.wine, unhypedwine.com, and the merchant storefronts we host on their subdomains). It explains what we collect, why, who processes it on our behalf, and your choices. We do not track you across other apps or websites, we use no advertising or analytics SDKs, and we do not sell your data.

What we collect

• Account email & password — when you create an account, to sign you in, sync your saved wines, and send you service emails (account verification and password resets). Your password is stored only as a one-way cryptographic hash — we cannot read it. You can browse and use the sommelier without an account.
• Scan photos — when you scan a wine label or list, the photo is sent to our service and then to our third-party AI provider, Anthropic (anthropic.com), whose servers are in the United States, to read the wines from the image. The photo is used only to answer that request; it is not stored against your account or kept by us after the scan. This means your scan photo is processed outside Singapore (see “Overseas processing”).
• Voice input — when you ask the sommelier by voice, your speech is transcribed on your device using Apple's speech recognition. The audio is processed locally; it is not sent to us or any third party, and is not stored — only the resulting text becomes your question (handled like any typed question above).
• Date of birth — required when you create an account, to confirm you are of legal drinking age (18+). We do not create accounts for anyone younger.
• Profile details (optional) — if you choose to fill in your profile: your name, phone number, address, country and preferred language. These are optional and never required to use Unhyped. We use them to personalise the product and to pass your name with a wine enquiry you choose to send. If you tick the marketing box we may send you rare finds and event invitations; you can untick it at any time and we record when consent was given or withdrawn.
• Location — two separate, optional uses. (1) If you grant location permission, a scan can carry the place it happened so your history is more useful. (2) If you switch on Arrival recognition in the app, your device watches for our partner wine merchants entirely on your phone — that location processing never leaves your device and is never sent to us. Both are off until you enable them, and you can turn them off in your device Settings at any time.
• Usage & activity — the searches and questions you run, wines you save, scans you submit, enquiries you send, and the wines shown to you in results. These are recorded as individual events and may also be aggregated for analytics. This happens whether or not you are signed in.
• Technical logs — when you use Unhyped we automatically log your IP address, your device/browser type (user-agent), an approximate location (country and city) derived from your IP address, and a session identifier. To work out the approximate location we send your IP address to a third-party lookup service, ip-api.com. We use this to run and secure the service and to show the right market, currency and legal notices — never for advertising.

How we use it

To read wines from your scans, provide recommendations, keep you signed in, sync saved wines across your devices, secure the service against abuse, and improve the product. We do not use your data for advertising, and we request no advertising identifier (IDFA).

Who we share it with (service providers)

We share data only with service providers that process it on our behalf to run Unhyped, under terms that bar them from using it for their own purposes or for advertising:

• Anthropic (United States) — reads the wines from your scan photo for that request.
• Resend (resend.com) — delivers our service emails (account verification, password reset); receives your email address and the message.
• ip-api.com — resolves an approximate location (country/city) from your IP address.

We use no third-party advertising, analytics or tracking SDKs.

Overseas processing

Some processing happens outside Singapore — for example, our AI provider (Anthropic) is in the United States. Where personal data is transferred overseas, we take steps so that it receives a standard of protection comparable to that required by the Singapore Personal Data Protection Act (PDPA).

Your choices & deletion

You can delete your account at any time — in the app, open Account → Delete account. This deletes your account record, your saved wines, and your active sessions; unlinks your past activity from your account by removing your account identifier from our event and analytics logs; and removes your email address from those logs.

Some non-identifying technical records — such as IP addresses, device/browser type, approximate location (country/city), session identifiers, timestamps, and the text of past questions — are retained in de-identified form for security, fraud prevention, billing and aggregate analytics, and are not linked back to you. You can also email us to request deletion.

Data retention & security

We keep account data for as long as your account is active. After deletion, the de-identified technical records described above are retained only as long as needed for the purposes above and then aged out. Connections use HTTPS.

Your rights

You can see and correct everything you have given us on your profile page (Profile → Account). You can withdraw marketing consent there at any time. You can ask us for access to, correction of, or deletion of your personal data by email; we respond within the timelines required by the Singapore Personal Data Protection Act.

Changes to this policy

If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect. Material changes will be flagged in the app.

Children

Unhyped is intended for users of legal drinking age (18+).

Contact

Questions, requests, or anything for our data protection officer: [email protected].